TI Mindmap HUB
Threat Intelligence Report

Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace

📅 October 31, 2026 📰 socket.dev 🔍 0 CVE(s) referenced

Cursor removed a malicious Claude Code 2.1.313 extension that may have compromised up to 5,000 users, while registry evidence refutes earlier claims that it spread through Open VSX or npm.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle